i would use a small firewall appliance with the features you require,
the major known brands with support will be expensive eg palo alto, or fortigate.
however small brands eg Firewalla will work nicely
or if one is it savvy could build their own with pfsense.
another path would be to use a cloud provider eg zscaler